System and method for analyzing malicious code protocol and generating harmful traffic

Abstract

The provided method and system is a method and system for analyzing the malicious code protocol and generating harmful traffic. The harmful traffic generating method constructs packet protocol information for generating a first attack packet corresponding to the TCP / IP protocol for generating network traffic, and then sets network vulnerability scanning for generating a second attack packet for carrying out network vulnerability scanning. Subsequently, the method constructs attack information for generating a third attack packet in the form of denial of service, and generates harmful traffic using the packet protocol information, network vulnerability scanning and attack information. Accordingly, performance testing of the network security system against malicious code attacks such as the Internet worm can be performed.

Description

[0001] This application claims the priority of Korean Patent Application No. 10-2004-0095547, filed on Nov. 20, 2004, in the Korean Intellectual Property Office, the disclosure of which is incorporated herein in its entirety by reference. BACKGROUND OF THE INVENTION [0002] 1. Field of the Invention [0003] The present invention relates to a method and system for analyzing a malicious code protocol and generating harmful traffic, which tests and measures the performance of a network security system. [0004] 2. Description of the Related Art [0005] Malicious code includes worm, virus, back door, trojan horse, malware, adware, and so on. Harmful traffic is the attack traffic generated by the malicious code and other attack signatures. [0006] Conventional malicious code protocol analysis is carried out by checking whether an attack pattern corresponding to previously known malicious code is matched with intrusion detection rules, but it is not performed through automatic CVE (Common Vulne...

AI Technical Summary

Problems solved by technology

The packet driver actually generates harmful traffic using the packet information constructed by the packet protocol configuration unit, network vulnerability scanning unit and attack protocol configuration unit.

Images